KEYS resource record serve publicising public keys by DNS. KEYS records were used in the framework by DNSSEC (DNS Security), replaced starting from 2004 however by the almost identical DNSKEY resource record.

Background

Publication IC key systems are considered today as efficient and variously applicable coding procedures. The owner of a key signatoryly for example private key admitted a message with only it. A receiver can verify this signature with help corresponding public keys and thus guarantee that the message actually comes from the sender and that it is genuine.

A Grundproblem of publication IC key systems is the distribution of the public keys: How does a user announce its Public key of the The procedure described here uses DNS. The owner of the key puts this down as KEY-RR on a publicly DNS server. Everyone, which needs the Public key this users, sends an appropriate DNS inquiry. As answer it receives then the public key. The procedure corresponds thereby to publicising of IP addresses.

Structure

A KEY-RR exists the following fields:

Example

child.example IN KEY (256; Zone key 3; dnssec 3; DSA coding BOPdJjdc/ZQWCVA/ONz6LjvugMnB2KKL3F1D2i9Gdrpi rcWRKS2DfRn5KiMM2HQXBHv0ZdkFs/tmjg7rYxrN+bzB NrlwfU5RMjioi67PthD07EHbZjwoZ5sKC2BZ/M596hyg fx5JAvbIWBQVF+ztiuCnWCkbGvVXwsmE+odINCur+o+E jA9hF06LqTviUJKqTxisQO5OHM/0ufNenzIbijJPTXbU cF3vW+CMlX+AUPLSag7YnhWaEu7BLCKfg3vJVw9mtaN2 W3oWPRdebGUf/QfyVKXoWD6zDLByCZh4wKvpcwgAsel4 bO5LVe7s8qstSxqrwzmvaZ5XYOMZFbN7CXtutiswAkb0 pkehIYime6IRkDwWDG+14H5yriRuCDK3m7GvwxMo+ggV 0k3Po9LD5wWSIi1N); key ID = 22004 

Security of the procedure

Publicising of a public key by DNS is sufficiently safe only if the appropriate KEY-RR is secured by DNSSEC by a SIG resource record digitally signed and the DNS Request. Publicising by a X.509-Zertifikat is still safer, but very many more and more expensively.

Related links

• RFC 2535 - DNS Security Extension

Articles in category "KEY resource record"

We found here 2 articles.

Related Websites

We found here 5 related websites.

• 3. The KEY Resource Record
  The KEY resource record (RR) is used to document a key that is associated with a Domain Name System (DNS) name. It will be a public key as only public keys ...


• Last Call: Limiting the Scope of the KEY Resource Record to ...
  The IESG has received a request from the DNS Extensions Working Group to consider Limiting the Scope of the KEY Resource Record ...


• Protocol Action: Limiting the Scope of the KEY Resource Record to ...
  This document removes application keys from the KEY record by redefining the Protocol Octet field in the KEY Resource Record Data. ...


• RFC 3445
  RFC 3445 (RFC3445) at The RFC Archive


• RFC 3445 on Limiting the Scope of the KEY Resource Record (RR)
  RFC 3445 Title: Limiting the Scope of the KEY Resource Record (RR) Author(s): D. Massey, S. Rose Status: Standards Track Date: December 2002 Mailbox: ...